commit 886cdc09c2656e074661f343192c750247848010
author ChrisC <christophe.closset@intl.att.com> Fri Apr 30 13:27:30 2021 +0200
committer ChrisC <christophe.closset@intl.att.com> Fri Apr 30 13:27:30 2021 +0200
tree 8b4f6a18be435b9458185995430121a64ae0b9f1
parent b5e34936cc893a3e0dad93f33b1864e7c8fe1cac

Vulnerable packages update

Exclude log4j 1.2.17 from being pulled

Issue-ID: SDC-3572
Signed-off-by: ChrisC <christophe.closset@intl.att.com>
Change-Id: I3fd25ddcd5f8e2089beed2d66bff82c2a3d65f48

security-util-lib/pom.xml

diff --git a/security-util-lib/pom.xml b/security-util-lib/pom.xml
index 020e7c1..a4eb3a7 100644
--- a/security-util-lib/pom.xml
+++ b/security-util-lib/pom.xml
@@ -69,6 +69,10 @@
                    <groupId>org.slf4j</groupId>
                    <artifactId>slf4j-simple</artifactId>
                </exclusion>
+               <exclusion>
+                   <groupId>log4j</groupId>
+                   <artifactId>log4j</artifactId>
+               </exclusion>
            </exclusions>
        </dependency>